Every CVE Search/ Get API key

CVE-2025-14946

Libnbd: libnbd: arbitrary code execution via ssh argument injection through a malicious uri

4.8 MediumFix available

A flaw was found in libnbd. A malicious actor could exploit this by convincing libnbd to open a specially crafted Uniform Resource Identifier (URI). This vulnerability arises because non-standard hostnames starting with '-o' are incorrectly interpreted as arguments to the Secure Shell (SSH) process, rather than as hostnames. This could lead to arbitrary code execution with the privileges of the user running libnbd.

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
Low
Privileges needed
Low
User interaction
Required

What an attacker can affect

Confidentiality
Low
Integrity
Low
Availability
Low

Exploit likelihood

0.14%Up 0.1 points since Dec 20, 2025
90%50%10%1%

What each source reports

CVE List Score used 4.8

Libnbd: libnbd: arbitrary code execution via ssh argument injection through a malicious uri

A flaw was found in libnbd. A malicious actor could exploit this by convincing libnbd to open a specially crafted Uniform Resource Identifier (URI). This vulnerability arises because non-standard hostnames starting with '-o' are incorrectly interpreted as arguments to the Secure Shell (SSH) process, rather than as hostnames. This could lead to arbitrary code execution with the privileges of the user running libnbd.

Record
CVE-2025-14946
CVSS 3.1
4.8 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L
Weakness
CWE-88
Updated
2026-11-05
EUVDEUVD-2025-204536 4.8

A flaw was found in libnbd. A malicious actor could exploit this by convincing libnbd to open a specially crafted Uniform Resource Identifier (URI). This vulnerability arises because non-standard hostnames starting with '-o' are incorrectly interpreted as arguments to the Secure Shell (SSH) process, rather than as hostnames. This could lead to arbitrary code execution with the privileges of the user running libnbd.

Record
EUVD-2025-204536
CVSS 3.1
4.8 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L
Updated
2026-11-05
GitHub AdvisoriesGHSA-mcgc-vc2p-cf7x 4.8

A flaw was found in libnbd. A malicious actor could exploit this by convincing libnbd to open a...

A flaw was found in libnbd. A malicious actor could exploit this by convincing libnbd to open a specially crafted Uniform Resource Identifier (URI). This vulnerability arises because non-standard hostnames starting with '-o' are incorrectly interpreted as arguments to the Secure Shell (SSH) process, rather than as hostnames. This could lead to arbitrary code execution with the privileges of the user running libnbd.

Record
GHSA-mcgc-vc2p-cf7x
CVSS 3.1
4.8 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L
Weakness
CWE-88
Updated
2026-11-02
NVD 4.8

A flaw was found in libnbd. A malicious actor could exploit this by convincing libnbd to open a specially crafted Uniform Resource Identifier (URI). This vulnerability arises because non-standard hostnames starting with '-o' are incorrectly interpreted as arguments to the Secure Shell (SSH) process, rather than as hostnames. This could lead to arbitrary code execution with the privileges of the user running libnbd.

Record
CVE-2025-14946
CVSS 3.1
4.8 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L
Weakness
CWE-88
Updated
2026-11-05
OSV 4.8

Libnbd: libnbd: arbitrary code execution via ssh argument injection through a malicious uri

A flaw was found in libnbd. A malicious actor could exploit this by convincing libnbd to open a specially crafted Uniform Resource Identifier (URI). This vulnerability arises because non-standard hostnames starting with '-o' are incorrectly interpreted as arguments to the Secure Shell (SSH) process, rather than as hostnames. This could lead to arbitrary code execution with the privileges of the user running libnbd.

Record
CVE-2025-14946
CVSS 3.1
4.8 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L
Weakness
CWE-88
Updated
2026-11-07
OSVDEBIAN-CVE-2025-14946 4.8

A flaw was found in libnbd. A malicious actor could exploit this by convincing libnbd to open a specially crafted Uniform Resource Identifier (URI). This vulnerability arises because non-standard hostnames starting with '-o' are incorrectly interpreted as arguments to the Secure Shell (SSH) process, rather than as hostnames. This could lead to arbitrary code execution with the privileges of the user running libnbd.

Record
DEBIAN-CVE-2025-14946
CVSS 3.1
4.8 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L
Updated
2026-11-06
OSVUBUNTU-CVE-2025-14946 4.8

A flaw was found in libnbd. A malicious actor could exploit this by convincing libnbd to open a specially crafted Uniform Resource Identifier (URI). This vulnerability arises because non-standard hostnames starting with '-o' are incorrectly interpreted as arguments to the Secure Shell (SSH) process, rather than as hostnames. This could lead to arbitrary code execution with the privileges of the user running libnbd.

Record
UBUNTU-CVE-2025-14946
CVSS 3.1
4.8 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L
Updated
2026-11-02
OSVopenSUSE-SU-2025:15842-1 No score

libnbd-1.24.0-2.1 on GA media

These are all security issues fixed in the libnbd-1.24.0-2.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2025:15842-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
libnbd
Debian:13
 All versions, plus listed versions
1.22.2-11.22.3-11.22.5-11.24.0-11.24.0-2
Show 6 moreShow less
1.24.0-2.11.24.1-11.24.2-11.24.2-21.24.3-11.24.4-1
 None known
libnbd
Debian:14
 before 1.22.5-1, plus listed versions
1.22.2-11.22.3-1
1.22.5-1
libnbd
Ubuntu:20.04:LTS
 All versions, plus listed versions
1.0.3-11.2.1-21.2.2-1ubuntu2
 None known
libnbd
Ubuntu:22.04:LTS
 All versions, plus listed versions
1.6.3-11.8.5-11.10.2-11.10.5-1
 None known
libnbd
Ubuntu:24.04:LTS
 All versions, plus listed versions
1.16.4-11.18.1-11.18.2-11.18.2-1build11.18.2-21.18.2-2build11.20.0-1
 None known
libnbd
Ubuntu:25.10
 All versions, plus listed versions
1.22.0-11.22.2-1build11.22.2-1build2
 None known
libnbd
Ubuntu:26.04:LTS
 All versions, plus listed versions
1.22.2-1build21.24.0-2ubuntu11.24.1-1ubuntu61.24.2-1ubuntu1
 None known
libnbd
openSUSE:Tumbleweed
 before 1.24.0-2.1
1.24.0-2.1

History

History
RecordedChangedSources
affectedNVD, OSV
factsCVE List, EUVD
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2025-14946 is a medium vulnerability (CVSS 4.8) in Red Hat Libnbd, published December 19, 2025. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.14%, the 3rd percentile. Fixed in libnbd 1.22.5-1.

References

Show 7 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open